This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yASHIeGE31fHJVZ0fQbOi-u4QA8.roa File: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (raw, json) Hash identifier: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg= Subject key identifier: C8:04:87:21:E1:84:DF:57:C7:25:56:74:7D:06:CE:8B:EB:B8:40:0F Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019B76EAE6EB8822B27F27417B7604953282 Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yASHIeGE31fHJVZ0fQbOi-u4QA8.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8595 IP address blocks: 82.194.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e6:eb:88:22:b2:7f:27:41:7b:76:04:95:32:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8048721e184df57c72556747d06ce8bebb8400f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:66:62:13:69:a4:89:8f:7e:3f:d4:37:b8: b9:f6:55:29:a3:5f:34:7e:d3:b5:16:29:91:a2:b9: ba:6a:e1:7e:b7:20:48:b3:c3:35:bf:82:00:86:de: 90:09:88:9e:cb:af:95:eb:29:f8:0f:bb:e0:51:03: 7f:7c:97:ab:e5:59:1c:e5:fc:a7:9f:32:03:e2:ce: fb:f6:20:ae:71:23:a2:98:67:1b:1d:4a:7c:61:21: 65:05:38:6d:43:4a:a3:df:fb:6b:d3:16:cc:18:02: 70:62:ca:2c:46:33:3d:cc:cf:70:6e:45:0d:b4:7c: 17:77:d3:5e:eb:35:b8:07:2b:33:90:67:c8:52:15: b4:d0:7b:01:7c:e5:f8:af:d5:fc:9a:ed:80:f3:25: a7:eb:d5:8c:0e:18:28:f4:48:c7:b5:33:26:e0:e8: f7:82:ca:44:ba:b2:5c:ff:c3:d8:73:26:5e:5f:e6: 8b:02:22:4d:b3:a8:7e:4b:3c:62:ad:8a:0a:69:ee: 6b:bb:48:eb:63:01:ce:47:a3:9e:5f:dc:53:1a:fe: fc:51:a6:9d:77:f2:a9:69:57:8a:f6:31:4f:4a:c8: c6:e3:9a:ef:23:f9:d4:f2:a1:47:b9:fa:4a:19:c4: c9:9c:c2:ee:a6:a1:79:b7:f6:b6:c6:cd:e4:09:ff: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:87:21:E1:84:DF:57:C7:25:56:74:7D:06:CE:8B:EB:B8:40:0F X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yASHIeGE31fHJVZ0fQbOi-u4QA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.194.242.0/23 Signature Algorithm: sha256WithRSAEncryption 25:be:9a:32:49:b8:5a:e4:32:94:6f:8f:bf:37:94:a5:c8:fb: 67:12:51:1a:f8:7e:f8:23:2a:1b:d7:2a:6b:ec:04:ef:41:5f: 53:41:80:7d:37:e8:b7:43:e3:ad:e0:d9:bf:22:a3:15:41:f3: e2:c7:dc:16:70:bf:f0:5b:b5:c0:66:3d:da:c4:21:3c:18:c7: 53:47:11:37:33:60:4f:b1:66:b5:e2:74:1e:d0:a7:3a:2e:d9: 78:91:bf:db:61:6e:b9:a6:59:2d:6d:fb:fc:95:8f:92:b1:3d: f1:26:bb:61:f8:7b:0d:ed:e3:45:53:97:5a:c5:ad:30:47:94: c5:d7:d4:18:fd:09:fa:88:95:2e:fa:04:26:89:a9:d5:a2:91: 67:af:7d:05:15:39:b9:a0:52:a4:80:dc:d9:19:b5:a7:08:3e: a0:3e:b5:04:e5:ff:00:8f:68:e6:44:c7:e0:7e:b7:eb:b5:4d: 6d:c0:a5:38:2d:87:a4:be:b9:bd:74:cc:e7:a2:6b:64:80:4e: 69:65:72:fa:83:79:90:3e:df:b6:5f:b8:11:54:32:29:cc:09: 70:1b:b9:49:54:01:d3:06:41:49:9d:ab:bb:e1:03:68:44:a0: 80:36:87:01:a2:d8:f1:2b:2b:52:e8:5e:cc:1e:69:81:bb:1c: ae:e1:be:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26ubriCKyfydBe3YElTKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODA0ODcyMWUxODRkZjU3YzcyNTU2NzQ3ZDA2Y2U4YmViYjg0MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc5mYhNppImPfj/UN7i59lUpo180 ftO1FimRorm6auF+tyBIs8M1v4IAht6QCYiey6+V6yn4D7vgUQN/fJer5Vkc5fyn nzID4s779iCucSOimGcbHUp8YSFlBThtQ0qj3/tr0xbMGAJwYsosRjM9zM9wbkUN tHwXd9Ne6zW4ByszkGfIUhW00HsBfOX4r9X8mu2A8yWn69WMDhgo9EjHtTMm4Oj3 gspEurJc/8PYcyZeX+aLAiJNs6h+SzxirYoKae5ru0jrYwHOR6OeX9xTGv78Uaad d/KpaVeK9jFPSsjG45rvI/nU8qFHufpKGcTJnMLupqF5t/a2xs3kCf+oFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgEhyHhhN9XxyVWdH0GzovruEAPMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEveUFTSEllR0UzMWZISlZaMGZRYk9pLXU0UUE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsLyMA0G CSqGSIb3DQEBCwUAA4IBAQAlvpoySbha5DKUb4+/N5SlyPtnElEa+H74Iyob1ypr 7ATvQV9TQYB9N+i3Q+Ot4Nm/IqMVQfPix9wWcL/wW7XAZj3axCE8GMdTRxE3M2BP sWa14nQe0Kc6Ltl4kb/bYW65plktbfv8lY+SsT3xJrth+HsN7eNFU5daxa0wR5TF 19QY/Qn6iJUu+gQmianVopFnr30FFTm5oFKkgNzZGbWnCD6gPrUE5f8Aj2jmRMfg frfrtU1twKU4LYekvrm9dMznomtkgE5pZXL6g3mQPt+2X7gRVDIpzAlwG7lJVAHT BkFJnau74QNoRKCANocBotjxKytS6F7MHmmBuxyu4b5k -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:09 2026 by rpki-client